MIT licensing and no install-time scripts reduce adoption and installation concerns. The repository could not be found, so maintenance and provenance remain unverified; the bundled vendor tree also makes the artifact harder to audit.
42%
Total Score
50
75
The package is 582 days old but has only two releases, with no releases in the last 12 months. That is strong evidence of limited maintenance and maturity.
The artifact contains substantial source code but also a large bundled vendor tree of 4,308 files, making provenance and auditing less transparent than a lean source package.
The artifact includes a README, tests, and a changelog. These are positive signs, although the README excerpt appears to describe a different package and weakens confidence in the packaging metadata.
Version 0.2.1 is not a stable major release, so the package may still have compatibility risk; it is not marked as a prerelease, which provides some compensation.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^8.83 | — | — |
guzzlehttp/guzzle Version ^7.8 | — | — |
illuminate/config Version ^8.83 | — | — |
maatwebsite/excel Version ^3.1 | — | — |
illuminate/support Version ^8.83 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.